Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a8be3cf-9a2f-3ed3-a960-767cc6f5f874.roa
File:                     4a8be3cf-9a2f-3ed3-a960-767cc6f5f874.roa (raw, json)
Hash identifier:          s4JNS66HthI7n3UePyhmo9Aj1TgasEx7Sr4Jrzo9xvk=
Subject key identifier:   C3:3D:53:BA:EB:48:0B:18:FA:35:69:2C:8C:56:12:D2:AD:C5:20:79
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584A1E2AACA36079CCEC83D52D00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a8be3cf-9a2f-3ed3-a960-767cc6f5f874.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     29802
IP address blocks:        23.230.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:ac:a3:60:79:cc:ec:83:d5:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=0f8278ec-84cf-4f9a-baa0-a8bd0c1d6477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:ca:4d:cf:f6:47:a6:b9:25:b4:09:40:d5:
                    63:36:14:3f:88:c4:a0:21:f7:88:e4:b3:d3:15:79:
                    0c:b0:60:c1:d1:77:c0:0c:f3:fe:14:11:dc:2b:37:
                    40:a6:2c:5e:05:80:a7:44:95:fc:92:a2:ab:a8:9b:
                    3d:ce:07:16:a1:91:f3:a7:d7:eb:4f:d2:23:54:a7:
                    20:eb:77:88:e1:96:75:d2:65:cf:14:10:ae:c0:95:
                    68:52:97:48:30:d5:96:48:fb:6b:d7:5f:a1:f4:d7:
                    63:5c:81:48:e9:70:79:a1:61:03:a3:01:30:65:8b:
                    e2:e1:d5:f4:25:b9:72:ff:a2:ca:df:a5:50:4e:d1:
                    77:3b:e8:8c:65:cb:28:44:1a:d0:8a:0f:87:3d:f5:
                    0e:89:eb:bf:73:da:fd:8c:98:f5:fe:45:9c:11:bb:
                    98:d2:5e:b2:20:e9:40:4a:50:55:e8:cf:38:ee:0e:
                    6c:13:56:57:a4:75:56:dd:66:86:69:a9:4d:0a:55:
                    99:51:9c:28:55:57:e5:bc:53:3a:5b:df:f1:f5:cf:
                    a6:19:ff:34:45:09:30:9e:a4:20:f7:92:87:e4:39:
                    61:00:65:41:07:92:1e:ff:43:ba:d3:4c:36:29:d5:
                    e9:f2:3b:5c:d4:20:e2:b3:e7:91:34:45:ca:02:07:
                    75:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3D:53:BA:EB:48:0B:18:FA:35:69:2C:8C:56:12:D2:AD:C5:20:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4a8be3cf-9a2f-3ed3-a960-767cc6f5f874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.230.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:02:3c:1b:7a:77:91:89:f5:5c:cf:e7:fd:8e:12:b1:89:ca:
         81:ff:79:68:b4:bd:02:e8:c9:db:4b:f1:fa:9b:1f:64:b4:9b:
         36:78:aa:ab:7b:6f:13:f5:a3:d5:f1:b6:9d:ba:71:05:72:b6:
         1b:0f:dd:73:6c:d5:12:bb:c3:4e:ae:f0:e6:c4:a6:d6:21:dc:
         bc:1b:0d:46:15:31:24:6c:16:0c:8d:db:d4:95:d2:e1:5c:ad:
         9f:99:85:f5:be:3e:ac:cc:b6:40:80:42:dd:c9:22:61:1b:69:
         ce:b5:7b:e3:1f:92:d8:ef:b9:71:7c:e3:e2:e1:ea:80:e2:28:
         6d:93:0e:d7:db:51:f3:34:d1:f6:28:48:c8:48:ef:d2:5b:d7:
         00:c6:70:73:6e:6a:2b:05:da:5b:83:16:1e:60:0d:22:e3:6b:
         40:d4:1d:b2:70:39:1a:6c:a4:fe:68:96:f2:21:81:2c:43:2d:
         75:0c:2f:cd:28:be:b8:35:ca:17:48:3a:f0:87:44:17:9f:3c:
         e0:3d:0f:09:57:40:57:44:53:59:30:f4:3e:66:b4:a4:e0:fd:
         63:f4:3c:22:31:09:79:64:1b:76:16:4e:bb:89:f4:bd:e6:87:
         64:2c:79:8f:57:94:52:24:52:45:53:24:e3:53:58:b7:45:99:
         bf:1d:a5:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqyjYHnM7IPVLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk
MGY4Mjc4ZWMtODRjZi00ZjlhLWJhYTAtYThiZDBjMWQ2NDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgHKTc/2R6a5JbQJQNVjNhQ/iMSgIfeI5LPT
FXkMsGDB0XfADPP+FBHcKzdApixeBYCnRJX8kqKrqJs9zgcWoZHzp9frT9IjVKcg
63eI4ZZ10mXPFBCuwJVoUpdIMNWWSPtr11+h9NdjXIFI6XB5oWEDowEwZYvi4dX0
Jbly/6LK36VQTtF3O+iMZcsoRBrQig+HPfUOieu/c9r9jJj1/kWcEbuY0l6yIOlA
SlBV6M847g5sE1ZXpHVW3WaGaalNClWZUZwoVVflvFM6W9/x9c+mGf80RQkwnqQg
95KH5DlhAGVBB5Ie/0O600w2KdXp8jtc1CDis+eRNEXKAgd1YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMM9U7rrSAsY+jVpLIxWEtKtxSB5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvNGE4YmUzY2YtOWEyZi0z
ZWQzLWE5NjAtNzY3Y2M2ZjVmODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+bpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkCPBt6d5GJ9VzP5/2OErGJyoH/eWi0vQLoydtL8fqbH2S0mzZ4qqt7
bxP1o9Xxtp26cQVythsP3XNs1RK7w06u8ObEptYh3LwbDUYVMSRsFgyN29SV0uFc
rZ+ZhfW+PqzMtkCAQt3JImEbac61e+MfktjvuXF84+Lh6oDiKG2TDtfbUfM00fYo
SMhI79Jb1wDGcHNuaisF2luDFh5gDSLja0DUHbJwORpspP5olvIhgSxDLXUML80o
vrg1yhdIOvCHRBefPOA9DwlXQFdEU1kw9D5mtKTg/WP0PCIxCXlkG3YWTruJ9L3m
h2QseY9XlFIkUkVTJONTWLdFmb8dpSw=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:37:42 2025 by rpki-client